Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/f64053-b938-4c51-8ec5-5d25244e4aad/1/90REoIZ_zKmjVpwf0JITNUajf0s.mft
File:                     90REoIZ_zKmjVpwf0JITNUajf0s.mft (raw, json)
Hash identifier:          gzeHKBo3n6H2yR0czMBwmGEn4vEXdqFyBNLevdtT8kw=
Subject key identifier:   C5:FB:6F:6B:5C:86:07:A5:D4:7A:5A:08:39:FA:87:1C:6B:D9:86:5F
Authority key identifier: F7:44:44:A0:86:7F:CC:A9:A3:56:9C:1F:D0:92:13:35:46:A3:7F:4B
Certificate issuer:       /CN=f74444a0867fcca9a3569c1fd092133546a37f4b
Certificate serial:       019F190D2622EB3070099DD7955FD8047E26
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/90REoIZ_zKmjVpwf0JITNUajf0s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/dd/f64053-b938-4c51-8ec5-5d25244e4aad/1/90REoIZ_zKmjVpwf0JITNUajf0s.mft
Manifest number:          1918
Signing time:             Tue 30 Jun 2026 15:01:59 +0000
Manifest this update:     Tue 30 Jun 2026 15:01:59 +0000
Manifest next update:     Wed 01 Jul 2026 15:01:59 +0000
Files and hashes:         1: 90REoIZ_zKmjVpwf0JITNUajf0s.crl (hash: F6E8Qndm99q53cM2gaK2FugqEhEx82N7ALkJoxXpk2U=)
                          2: n2KWOfawjYsdrcU5kcTAVZoJ1KA.roa (hash: xCEQfYPaY0aViHtL0tmC47O4thf/Lzk7C/w84Q6tZQg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/dd/f64053-b938-4c51-8ec5-5d25244e4aad/1/90REoIZ_zKmjVpwf0JITNUajf0s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/dd/f64053-b938-4c51-8ec5-5d25244e4aad/1/90REoIZ_zKmjVpwf0JITNUajf0s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/90REoIZ_zKmjVpwf0JITNUajf0s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 01 Jul 2026 14:31:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:19:0d:26:22:eb:30:70:09:9d:d7:95:5f:d8:04:7e:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f74444a0867fcca9a3569c1fd092133546a37f4b
        Validity
            Not Before: Jun 30 15:01:59 2026 GMT
            Not After : Jul  1 15:01:59 2026 GMT
        Subject: CN=c5fb6f6b5c8607a5d47a5a0839fa871c6bd9865f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:f9:95:bf:5d:1c:79:68:da:30:27:26:77:35:
                    b8:71:0b:cd:3a:72:be:11:65:6f:75:22:1b:c8:6d:
                    8c:bc:7e:bd:b1:31:8d:fe:a1:04:ab:f8:c1:ed:c3:
                    b0:36:c5:19:06:7c:a5:49:4a:31:4b:9a:93:89:9f:
                    b6:52:c9:6b:67:9e:1e:bb:27:a3:40:11:96:17:40:
                    f6:fa:2b:34:5a:f5:d7:06:ad:7f:31:37:61:e4:44:
                    1a:5d:a6:b0:14:c6:af:8c:49:4f:e5:ba:5f:cb:10:
                    f0:51:7a:ae:c3:94:50:26:f2:57:39:48:be:af:54:
                    df:35:54:54:c2:0c:3d:f4:ff:91:56:da:22:97:f9:
                    4b:09:ad:7c:1b:2d:65:85:b3:a5:43:e3:96:8d:da:
                    94:b8:64:e5:a9:52:7e:79:f1:d0:27:7d:aa:dc:ee:
                    f5:0b:21:5e:91:3a:43:1c:c4:15:17:0d:9b:a8:23:
                    81:3a:71:9e:7c:25:3d:53:77:ae:c1:cc:bc:82:72:
                    7c:2d:53:c1:95:aa:75:41:31:c0:d2:99:34:34:12:
                    1d:ff:6d:13:be:d8:4a:f2:fa:5d:0d:bb:54:11:cd:
                    33:e9:b2:ac:06:f9:82:42:e6:6d:e8:95:ef:b3:9a:
                    05:24:51:d8:80:06:45:05:c9:99:7d:8a:7d:35:bc:
                    56:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:FB:6F:6B:5C:86:07:A5:D4:7A:5A:08:39:FA:87:1C:6B:D9:86:5F
            X509v3 Authority Key Identifier:
                keyid:F7:44:44:A0:86:7F:CC:A9:A3:56:9C:1F:D0:92:13:35:46:A3:7F:4B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/90REoIZ_zKmjVpwf0JITNUajf0s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/f64053-b938-4c51-8ec5-5d25244e4aad/1/90REoIZ_zKmjVpwf0JITNUajf0s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/f64053-b938-4c51-8ec5-5d25244e4aad/1/90REoIZ_zKmjVpwf0JITNUajf0s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         53:43:27:f3:d8:c3:b1:58:c5:4e:96:75:28:3f:bf:26:0c:8e:
         44:fa:7e:f8:d3:b0:e4:3a:e9:1d:ae:ec:34:69:63:83:75:5f:
         f9:1e:b9:f5:7b:0c:cb:65:f8:44:3e:c8:fb:40:b1:61:63:aa:
         b0:46:4f:af:3b:cf:95:93:27:01:8b:4f:6e:dc:6e:80:5d:2d:
         1a:e7:c2:b5:4b:55:ff:f6:5c:af:9c:de:34:5e:3f:a3:64:b3:
         77:66:bd:a2:0b:5f:15:d5:2d:a8:f7:46:27:26:15:e2:38:17:
         c4:67:38:b0:f6:dd:81:ce:34:8b:64:38:9f:00:f5:ae:ff:83:
         85:fb:e6:f3:f8:d4:2c:30:d9:e8:63:d7:6a:9b:04:df:1f:6a:
         40:b0:56:df:2d:20:08:59:27:0a:a6:5e:5c:e5:cf:cc:55:d9:
         4d:04:55:80:76:40:82:51:03:fb:41:bd:80:8c:a8:48:d1:e6:
         1e:4a:ba:c5:31:84:ec:fe:4f:86:87:7e:9e:e6:bc:4e:61:4e:
         62:2e:66:e7:aa:72:1a:30:96:7b:e2:85:07:8c:4d:03:17:f3:
         1c:9f:3c:c9:ca:1a:05:4b:9f:cc:7a:91:ad:37:ca:4c:c4:12:
         20:a6:72:44:25:48:e1:00:ac:71:1b:3e:1f:fc:00:80:45:ca:
         8e:c2:61:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 18:26:01 2026 by rpki-client